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SOLVING CONSTRAINT SATISFIABILITY PROBLEM FOR AUTOMATIC 
GENERATION OF DESIGN VERIFICATION VECTORS 



CLAIM FOR PRIORITY 

This application claims the benefit of priority under 35 U.S.C. § 1 19(e) of U.S. 
Provisional Application Number 60/246,422 filed on November 6, 2000, the entirety of 
which is incorporated herein by reference. 

APPENDICES 

Appendix A, which forms a part of this disclosure, provides theoretic details of 
the modular constraint solver as disclosed herein. 

Appendix B, which forms a part of this disclosure, provides an exemplary 
procedure for solving linear equations that have bit slicing and concatenation operations. 



The present invention relates generally to functional verification of circuit designs 
and, more particularly, to the generation of verification vectors for use in debugging 
circuit designs. 

Description of the Related Art 

Verification is typically the most time-consuming component in a circuit design 
process. Failing to detect functional design errors early in the design stage usually leads 
to the expensive re-spin of the design process. This re-spin includes diagnosis and 
correction of the errors, logic and physical re-synthesis, and most important of all, re- 
running the functional verification of the design. 

Thus far, simulation is the mainstream approach for function verification of circuit 
designs. Various coverage metrics, for example, hardware description language (HDL)- 
based code coverage, are used to assess the quality of the verification vectors and 
determine when to stop the simulation process. A drawback is that the verification 
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vectors are either manually derived by designers or randomly generated from the high- 
level description of the design and its environment. As a result, verification vectors, for 
example, for some corner-case bugs, are not easily derived and high coverage is generally 
hard to achieve. 

5 Deterministic functional vector generation is one technique intended to enhance 

the aforementioned verification quality. Deterministic functional vector generation can 
be viewed as a constraint satisfiability problem. Intended circuit behavior is translated as 
a set of temporal constraints and a design error is found or detected if there exists an input 
sequence that violates these constraints. However, due to the increasing complexity of 

M 10 modern circuit designs, current constraint satisfiability techniques still suffer from 

O 

p unacceptable capacity and performance problems. For example, typical Automatic Test 

f*[ Pattern Generation (ATPG) and Boolean satisfiability (SAT) engines use branch-and- 

LTi bound algorithms to search for test vectors in the Boolean space. These techniques can be 

jj\ used to generate counter-examples for the properties of a circuit. However, because the 

j\ 15 computational complexity of these techniques grows exponentially as the sequentiality of 

O the property increases, these techniques can only handle property checking with limited 

ni 

r? sequential depth. 



O In contrast, general arithmetic solvers apply mathematical theorems to analyze the 

constraints. They treat the signals in a circuit as integers and solve the formulas in the 
20 integral or floating point number system. However, since the signal values of the circuit 
actually operate in the modular number system, solving circuit constraints in the integral 
or floating point number system may add unnecessary complexity and even lead to 
invalid solutions. 

Finite State Machine (FSM) reachability analysis is another technique intended to 
25 enhance the aforementioned verification quality. FSM state traversal techniques treat the 
design as a finite state machine and the properties as temporal relations between states. In 
order to assure that no input sequence can violate the properties, a complete state 
reachability analysis is required. Explicit state enumeration approach is a technique for 
performing the analysis that uses a hash data structure to record the reached states. Since 
30 the number of states grows exponentially as the number of registers increases, the explicit 
state enumeration technique has the state explosion problem for larger designs. 

Symbolic state traversal approach is another technique for performing the 
reachability analysis. In contrast to the explicit approach, symbolic state traversal 
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approach uses compact data structures such as Binary Decision Diagram (BDD) to 
compute and record the reached states. In general, symbolic state traversal approach can 
handle larger designs than the explicit state enumeration approach. However, symbolic 
state traversal approach still suffers from the state explosion problem for designs with 
5 more than approximately one hundred registers. As a result, full chip (whole circuit) 
functional verification is unattainable using FSM state traversal techniques. 

SUMMARY 

The present invention provides a system and method for checking assertion 

M> 10 properties for register-transfer level (RTL) designs. In one embodiment, structural word- 

□ 

p level ATPG is combined with modular arithmetic constraint-solving techniques to solve 

1 one or more constraints imposed by one or more target assertion properties on a circuit 
U] design. The word-level ATPG and its associated implication technique not only solves 

jjl the constraints on the circuit's control logic, but also propagates the logic implications to 
5 15 the datapath portion of circuit. An arithmetic constraint solver based on a modular 
P number system then solves the remaining constraints in the datapath. 
\jS For purposes of summarizing the invention, certain aspects, advantages, and novel 

features of the invention have been described herein. It is to be understood that not 
necessarily all such advantages may be achieved in accordance with any one particular 
20 embodiment of the invention. Thus, the invention may be embodied or carried out in a 
manner that achieves or optimizes one advantage or group of advantages as taught herein 
without necessarily achieving other advantages as may be taught or suggested herein. 

In one embodiment, a method for generating a test vector for functional 
verification of circuits includes: providing a representation of a circuit, the representation 
25 having a control logic component and a datapath logic component; reading one or more 
vector generation targets; performing word-level ATPG justification on the control logic 
component to obtain a control logic solution; extracting one or more arithmetic functions 
for the datapath logic component based on the control logic solution; and solving the one 
or more arithmetic functions using a modular constraint solver, the modular constraint 
30 solver being based on a modular number system. 

In another embodiment, a method for performing word-level ATPG justification 
on a target circuit, wherein the target circuit includes one or more control signals, 
includes: identifying an internal control signal of the target circuit; making a decision on 
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the identified internal control signal; performing word-level implication on circuit 
components related to the target circuit; determining if a conflict arises from the word- 
level implication; and determining if the one or more control signals are justified. 

In still another embodiment, a method for performing word-level ATPG on a 
target circuit, wherein the target circuit includes one or more control signals and one or 
more data signals, includes: performing word-level implication; performing ATPG 
justification on the control signals of the target circuit; and solving the data signals 
utilizing a modular constraint solver. 

In yet another embodiment, a computer-readable storage medium has stored 
thereon computer instructions that, when executed by a computer, cause the computer to: 
provide a representation of a circuit, the representation including a control logic 
component and a datapath logic component; read one or more vector generation targets; 
perform word-level ATPG justification on the control logic component to obtain a control 
logic solution; extract one or more arithmetic functions for the datapath logic component 
based on the control logic solution; and solve the one or more arithmetic functions using a 
modular constraint solver, the modular constraint solver being based on a modular 
number system. 

In a further embodiment, a computer-readable storage medium has stored thereon 
computer instructions that, when executed by a computer, cause the computer to: 
determine a target circuit; identify an internal control signal of the target circuit; make a 
decision on the identified internal control signal; perform word-level implication on 
circuit components related to the target circuit; determine if a conflict arises from the 
word-level implication; and determine if the one or more control signals are justified. 

In still a further embodiment, a computer-readable storage medium has stored 
thereon computer instructions that, when executed by a computer, cause the computer to: 
determine a target circuit, the target circuit having one or more control signals and one or 
more data signals; perform word-level implication; perform ATPG justification on the 
control signals of the target circuit; and solve the data signals utilizing a modular 
constraint solver. 

These and other embodiments of the present invention will also become readily 
apparent to those skilled in the art from the following detailed description of the 
embodiments having reference to the attached figures, the invention not being limited to 
any particular embodiment(s) disclosed. 
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BRIEF DESCRIPTION OF THE DRAWINGS 
Figure 1 is a flow chart illustrating an assertion-checking framework, according to 
one embodiment. 

Figure 2 is a block diagram illustrating a conceptual internal representation of an 
exemplary circuit. 

Figure 3 is a flow chart of an exemplary method for performing word-level ATPG 
justification on the control logic portion of the circuit, according to one embodiment. 

Figure 4 is a flow chart of an exemplary method for solving the arithmetic 
functions for the datapath logic portion of the circuit, according to one embodiment. 

Figure 5 illustrates a boolean gate implication example. 

Figure 6 illustrates an adder circuit implication example. 

Figure 7 illustrates a comparator implication example. 

Figure 8 illustrates a noninverted tristate element implication example. 

DETAILED DESCRIPTION 
A system and method for checking assertion type properties for RTL design 
verification is described. In one embodiment, a structural word-level ATPG and a 
modular arithmetic constraint solver facilitate the checking of assertion properties of 
circuit designs. 

A circuit netlist (RTL netlist) is a netlist of high-level primitives that describes a 
circuit design. Structural ATPG and modular arithmetic enable better utilization of the 
high-level RTL information and facilitate word-level implication on both Boolean and 
arithmetic gates, which, along with other components, are included in the RTL netlist. 
The implications between the Boolean and arithmetic gates are translated using a 
technique that enables the detection of conflicting implications at an early state in the 
implication process. 

Structural word-level ATPG utilizes a branch-and-bound process to perform the 
necessary word-level implication on the appropriate circuit components. The abstract 
state variables in the extended finite state machine model representation of the circuit 
serve as good candidates of decision points in the branch-and-bound process. When a 
search encounters a conflict in an abstract state transition or learns that a transition can 
lead to a hard-to-reach state, the transition is recorded (e.g., in an appropriate extended 
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state transition graph). The recorded information is then used in subsequent ATPG 
processes to speed up the search. 

The signal values in RTL netlists are represented using finite width bit-vectors. 
As such, a modular arithmetic constraint solver that solves arithmetic constraints using a 
modular instead of general integral number system will not miss the solutions that result 
from the modulation. Thus, use of the modular arithmetic constraint solver avoids the 
false-negative effect in generating counter examples (is false positive from the 
perspective of assertion checking). 

The preferred embodiments of the present invention and their advantages are 
better understood by referring to Figures 1 through 8 of the drawings. Throughout the 
drawings, like numerals are used for like and corresponding parts of the various drawings. 

Turning first to the nomenclature of the specification, the detailed description that 
follows is presented largely in terms of processes and symbolic representations of 
operations performed by conventional computers, including computer components. A 
computer may be any microprocessor or processor (hereinafter referred to as processor) 
controlled device such as, by way of example, personal computers, workstations, servers, 
clients, mini-computers, main-frame computers, laptop computers, a network of one or more 
computers, mobile computers, portable computers, handheld computers, palm top 
computers, set top boxes for a TV, interactive televisions, interactive kiosks, personal digital 
assistants, interactive wireless devices, mobile browsers, or any combination thereof. The 
computer may possess input devices such as, by way of example, a keyboard, a keypad, a 
mouse, a microphone, or a touch screen, and output devices such as a computer screen, 
printer, or a speaker. Additionally, the computer includes memory such as a memory 
storage device or an addressable storage medium. 

The computer may be a uniprocessor or multiprocessor machine. Additionally the 
computer, and the computer memory, may advantageously contain program logic or other 
substrate configuration representing data and instructions, which cause the computer to 
operate in a specific and predefined manner as, described herein. The program logic may 
advantageously be implemented as one or more modules. The modules may advantageously 
be configured to reside on the computer memory and execute on the one or more processors. 
The modules include, but are not limited to, software or hardware components that perform 
certain tasks. Thus, a module may include, by way of example, components, such as, 
software components, processes, functions, subroutines, procedures, attributes, class 
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components, task components, object-oriented software components, segments of program 
code, drivers, firmware, micro-code, circuitry, data, and the like. 

The program logic conventionally includes the manipulation of data bits by the 
processor and the maintenance of these bits within data structures resident in one or more of 
5 the memory storage devices. Such data structures impose a physical organization upon the 
collection of data bits stored within computer memory and represent specific electrical or 
magnetic elements. These symbolic representations are the means used by those skilled in 
the art to effectively convey teachings and discoveries to others skilled in the art. 

The program logic is generally considered to be a sequence of computer-executed 

10 steps. These steps generally require manipulations of physical quantities. Usually, 

although not necessarily, these quantities take the form of electrical, magnetic, or optical 
signals capable of being stored, transferred, combined, compared, or otherwise 
manipulated. It is conventional for those skilled in the art to refer to these signals as bits, 
values, elements, symbols, characters, text, terms, numbers, records, files, or the like. It 

1 5 should be kept in mind, however, that these and some other terms should be associated 
with appropriate physical quantities for computer operations, and that these terms are 
merely conventional labels applied to physical quantities that exist within and during 
operation of the computer. 

The program logic can be maintained or stored on a computer-readable storage 

20 medium. The term "computer-readable storage medium" refers to any medium that 
participates in providing the symbolic representations of operations to a processor for 
execution. Such media may take many forms, including, without limitation, volatile 
memory, nonvolatile memory, electronic transmission media, and the like. Volatile 
memory includes, for example, dynamic memory and cache memory normally present in 

25 computers. Nonvolatile memory includes, for example, optical or magnetic disks. 

It should be understood that manipulations within the computer are often referred 
to in terms of adding, comparing, moving, searching, or the like, which are often 
associated with manual operations performed by a human operator. It is to be understood 
that no involvement of the human operator may be necessary, or even desirable. The 

30 operations described herein are machine operations performed in conjunction with the 
human operator or user that interacts with the computer or computers. 

It should also be understood that the programs, modules, processes, methods, and 
the like, described herein are but an exemplary implementation and are not related, or 
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limited, to any particular computer, apparatus, or computer language. Rather, various 
types of general purpose computing machines or devices may be used with programs 
constructed in accordance with the teachings described herein. Similarly, it may prove 
advantageous to construct a specialized apparatus to perform the method steps described 
herein by way of dedicated computer systems with hard- wired logic or programs stored in 
non- volatile memory, such as, by way of example, read-only memory (ROM). 

Assertion-Checking Framework 

Referring now to the drawings, Figure 1 illustrates an assertion-checking 
framework, according to one embodiment. The assertion-checking framework enables 
the system and methods of the present invention to perform circuit design verification. 
The system reads in as input data such as, by way of example, RTL Verilog or very high- 
speed integrated circuit hardware description language (VHDL) codes, an initialization 
sequence, and environmental setup information (step 102). 

The RTL Verilog or VHDL codes specify a HDL design of a circuit and is 
provided by a circuit designer. The initialization sequence is applied to derive the set of 
initial states for the circuit. The environmental setup information defines constraints on 
the circuit inputs such as clock waveform(s), relations between signals in the circuit, 
signal characteristics, etc. The circuit designer or other user wanting to verify the circuit 
design can provide the initialize sequence and environmental setup information for the 
circuit design. 

The system creates an internal data representation of the circuit from the input 
data (step 104). The system synthesizes/maps the HDL design into a netlist of high-level 
primitives called an RTL netlist. The RTL netlist includes: boolean gates, arithmetic 
units, comparators (data-to-control), multiplexers and tristate elements (control-to-data), 
multiple-driven nets (called bus gates), and memory elements (flip flops and latches). 
The circuit can then be viewed as an interconnection of control and datapath portions, 
with some datapath-selecting signals and comparison-output signals functioning as the 
interface between the control and datapath portions (Fig. 2). 

In one embodiment, the system, in order to preserve the original design intent, 
does not perform logic minimization to optimize the netlist. For example, the internal 
don't-cares in the circuit design are recorded and represented as functions of module 
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inputs. These don't-care conditions can later be included in the ATPG constraint-solving 
justification process. 

The system reads as input one or more vector generation targets (step 106). The 
circuit designer can provide the vector generation targets. As used herein, a vector 
generation target can be considered a circuit condition and can include signals, sequence 
of signals, and combinations of signals in the circuit. The vector generation targets 
specify temporal relationships between the signals or signal values and are used to 
generate the simulation vector(s) needed to exercise the circuit condition specified by the 
vector generation targets. If a vector generation target is not provided, the system can 
select a default target (e.g., the system can generate vectors for predetermined signals in 
the circuit). 

In one embodiment, the system formulates the constraints of the target assertion as 
a linear temporal property, which specifies the expected signal values and relations in an 
execution sequence. The assertion property is first inverted to produce a counterexample- 
generation problem and then translated into value requirements in different time frames. 

The system then performs word-level ATPG justification on the control logic 
portion of the circuit (step 108). For example, a constraint solver component of the 
system applies word-level ATPG techniques to solve the constraints in the boolean 
domain and propagates the implications to the arithmetic units. The word-level ATPG 
justification process is further discussed below. If no solution in the controller part can be 
found (step 110), the system can conclude that no counter example can be generated for 
this property and, thus, the assertion holds. The system can report the result (step 122) 
and end processing. 

Otherwise, if a solution in the controller part can be found (step 1 10), the system 
checks to determine if the requirements on the datapath logic component is satisfied 
(step 1 12). If the datapath logic is satisfied, a counterexample is found and the assertion 
property fails. The system can report the result (step 122) and end processing. 
Otherwise, the system needs to check the satisfiability of the remaining constraints on the 
datapath logic. For example, an arithmetic constraint solver component of the system can 
check the satisfiability of the remaining constraints on the datapath logic. 

The datapath circuitry usually includes some arithmetic functions (e.g., addition 
and subtraction) and relational constraints. The system can combine the functions and 
constraints in different time frames together by treating the registers as buffers and adding 
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some extra variables. The system then translates the arithmetic functions and constraints 
into a set of nonlinear and linear equations based on the current control logic 
solution (step 114). 

Having extracted the arithmetic functions for the datapath logic, the system uses 
the modular arithmetic solver to solve the extracted arithmetic functions (step 1 16). If a 
datapath solution exists (step 1 1 8), then a counter example is found and the assertion 
fails. The system can report the result (step 122) and end processing. Otherwise, if a 
datapath solution does not exist, the system backtracks the previous (i.e., current) 
implication imposed by the control logic solution during the word-level ATPG 
justification process (step 120). The system then goes back to the ATPG justification 
process (step 108) to obtain the next set of solutions for the controller circuit. The system 
then iterates steps 110 through 1 18 for the next set of solutions for the controller circuit. 
This process will continue until the property is proved or the runtime exceeds a 
preset limit. 

Those of ordinary skill in the art will appreciate that, for this and other methods 
disclosed herein, the functions performed in the exemplary flow charts may be 
implemented in differing order. Furthermore, steps outlined in the flow charts are only 
exemplary, and some of the steps may be optional, combined into fewer steps, or 
expanded into additional steps without detracting from the essence of the invention. 

Word-Level ATPG Justification Process 

In one embodiment, word-level ATPG justification process utilizes a branch-and- 
bound process. By making decisions on certain boolean gates, the process tries to justify 
the target logic assignments, which correspond to the constraints derived from the target 
verified property. Once an assignment of a decision is made, a complete word-level 
implication is performed to check the consistency of the constraints in the circuit. If a 
conflict occurs, conflict analysis is applied to derive the minimal conflict sources and 
formulate them as a learned constraint so that the same conflict can be avoided. 

In one embodiment, the system utilizes three levels of output strength (e.g., 
strong, weak, and high-impedance "z") to represent the values in an RTL netlist in order 
to handle the HDL constructs for assertion checking. The weak signals (weak 1 and 
weak 0) are used for the resistant device that fans out to a bus gate, and the strong signals 
(strong 1 and strong 0) are applied to all the other gate types and connections. For 
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example, if a bus gate has an rcmos (resistant cmos primitive in Verilog) gate as one of its 
inputs, then the output of the rcmos gate is treated as a weak signal in the logic 
implication of this bus gate. In contrast, if the rcmos gate fans out to another type of gate 
(e.g., an AND gate), then its output is evaluated as a strong signal by this fan-out gate. 
5 The high-impedance "z" value is used for the tristate element output when the 

enabling signal is off. However, the high-impedance signal is meaningful only for the 
fan-ins of a bus gate. In other cases (e.g., a high-impedance fan-in of an AND gate), the 
high-impedance fan-in is treated as an unknown value (i.e., strong 1 or strong 0) "x" for 
the logic implication. 

N- 10 From the above interpretation, the logic implication of all the gate types except for 

O 

Q the bus gate can be operated under three- valued logic (i.e., 1, 0, and unknown "x"). In 
!» contrast, the implication of the bus gate can be performed as follows: first, check if any 

U1 strong fan-in (i.e., the nonresistant gate) of the bus gate is not in the high-impedance state. 

.Fx. 

pi If there exists a strong fan-in that is driving, this fan-in suppresses the logic implication of 

15 the weak fan-ins (i.e., the resistant gates) resulting in the bus gate having a strong output 
value. On the contrary, if all the strong fan-ins are in the high-impedance state, then the 
output value of the bus gate is determined by the implication of the weak fan-ins and 
becomes a weak signal. 

Although there are possibly six different kinds of values for a bus gate 
20 (i.e., strong 1/0, weak l/0 ? high-impedance "z", and unknown "x"), four-valued logic 

(i.e., 1, 0, "z", and "x") is sufficient for the bus gate implication since the implications of 
its strong and weak fan-ins are always performed separately. As a result, the system can 
use a four-valued bit-vector package to represent all the word-level values in the 
RTL netlist. 

25 Figure 3 is a flow chart of an exemplary method for performing word-level ATPG 

justification on the control logic portion of the circuit, according to one embodiment. 
Beginning at a start step, the system (i.e., constraint solver component) determines if 
there is a control signal to process (step 302). If there are no control signals to process 
(i.e., all applicable control signals have been processed without success), the system can 
30 report that no solution was found (step 316), and the word-level ATPG justification 
process ends. Otherwise, if there is a control signal to process (step 302), the system 
makes a decision (i.e., control signal = '0' or c T) on an internal control signal of the 
target (step 304). 
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In one embodiment, the system makes decisions on the control signals and leaves 
the requirements in the datapath portion unjustified. This reduces the effort of the ATPG 
process as the enumeration of the potentially enormous number of datapath decision 
points is avoided. In addition, whenever there is a new decision of assigning a logic value 
to a single-bit control signal, word-level logic implication is performed to reduce the 
search space and to detect early contradictions in value assignments. 

In one embodiment, after implication, the system checks if there is any unjustified 
logic gate. The system checks to determine if the logic gate's three-valued simulation 
value is different from its output implied value or the values of the control flip flops do 
not cover the initial states. If yes, the boolean constraints are not satisfied and the system 
performs a justification procedure. 

In one embodiment, the justification process begins by backward, breadth-first 
traversing the circuit from the unjustified gates and stopping at a cut of candidate decision 
points including control primary inputs (Pis), flip flops, comparator outputs, and multiple 
fan-out internal logic gates. If the number of decision candidates is too large, using all of 
them as the decision points may make the decision-making process less efficient. 
Therefore, if the number of decision candidates exceeds a predetermined limit, based on 
the number of fan-outs of each candidate, a subset can be selected as the decision nodes. 

The decision-making candidate gates are then sorted based on their bias of being 
assigned "1" or "0" to meet the requirements of the unjustified gates. The observability in 
general is not a problem in RTL design verification because the system can add watch 
points (in RTL simulation) wherever necessary. The system backward computes the 
legal-1 /legal-0 probability for the signals between the unjustified and decision- 
making gates. 

Definition 1 (Legal- 1 /Legal-0 Probability): The legal- 1 (legal-0) probability of a 
signal is the probability of its being assigned to "1" ("0") to satisfy its output logic value. 

For example, if a two-input AND gate has output value "0" and both inputs have 
value "x", then there are three different legal assignments that can satisfy this unjustified 
value: {(0, 0), (0, 1), (1, 0)}. Therefore, the legal-1 probability for the input signal is 1/3 
because only one out of three legal assignments has value "1" for each of the inputs. In 
contrast, if the two-input AND gate has output value "1", its input legal-1 probability is 1 
(100%) since this is the only legal assignment. The summation of legal-1 and legal-0 
probabilities is equal to 100%. 
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The backward legal- 1 probability calculation can be generalized as follows: 
Rule 1) For signals with Boolean value "1 the legal- 1 probability = 1 (100%). In 
contrast, for signals with Boolean value "0", the legal- 1 probability = 0. 
Rule2) Suppose the legal- 1 and legal-0 probability for a gate output is pi, and pO, 
5 and it has an unjustified output value and n unknown inputs (with value "x"). The 

legal- 1 probabilities (q\) for its input is (for different gate types): 
INVERTER: q\ = p0; 
AND: q\ = pi + (2 n_1 - l)/(2 n - 1) * pO; 
OR: ?1 =(2 n " 1 )/(2 n - l)*pl. 
10 Rule 3) The legal- 1 probability of a fan-out stern is set to the average of the legal- 

1 probabilities of its fan-out branches. 

In one embodiment, after the legal- 1 probabilities of the decision gates are 
computed, the system calculates their legal assignment bias as: 
m Definition 2 (Legal Assignment Bias): Let the legal- 1 probability of a gate be pi, 

15 then its legal assignment bias is: 

(pl)/(l -pi) if pi > 0.5; (bias value = "1") 
(1 - p\)l(p\) if pi < 0.5; (bias value = "0"). 
The legal assignment bias is always greater or equal to one. Having the legal 
assignment bias for each decision point, the system can make the decision at the gate with 
20 the highest bias first. For the case of proving an assertion property, that is, it is likely that 
the counter example does not exist or, if it exists, it is hard to find, the system first assigns 
the complement of the bias value so that the conflicting condition may occur earlier and 
thus trim down the decision space. In contrast, if the objective is to generate a witness 
sequence that is likely to exist, the system assigns the bias value (instead of its 
25 complement) first. 

The system performs word-level implication on the circuit components that are 
related to the target (step 306). In one embodiment, the system, in addition to the four- 
valued bit-vector package, utilizes different kinds of data structures to record the learned 
information for different primitives. This enables forward and backward word-level logic 
30 implications not only on boolean gates, but also on arithmetic elements. Moreover, this 
also facilitates translation of the implications between boolean gates and 
arithmetic elements. 
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The implication rules for different kinds of primitives can described as follows: 

1) Boolean Gates: The system utilizes three-valued logic encoding (i.e., 0. 1, and 
unknown V) to perform parallel implication for bitwise logic gates. For example, as 
depicted in Figure 5, the 4-bit AND gate has input values a = 4*bl0xx, b = 4'bxxxx and 
output y = 4 r bx00x. If input b receives the new implication value 4 T blxlx, it will forward 
imply a new value 4T>100x at output y, which in turn backward implies a new 
value 4*bl00x at input a. 

2) Arithmetic Units: For arithmetic units like adders, the system performs three- 
valued forward and backward simulation to propagate as much known-value information 
as possible. For example, as depicted in Figure 6, if a 4-bit adder has output 
value 4^01 11 and one of its input has value 4'blxlx, then by subtracting 4 r blxlx from 
41)01 1 1, the system can learn that the other input must at least have the value 4 f blx0x and 
the adder must have a carry-out value equal to one. Furthermore, the solutions to a linear 
arithmetic network can be represented as a closed matrix form: x = x 0 + N * f, where x is 
the vector of the input variables, x 0 is a particular solution, N is a coefficient matrix, and f 
is a set of free variables. 

3) Comparators: The system uses a pair of bit- vectors to record the maximum and 
minimum values for each of the comparator inputs. For example, as depicted in Figure 7, 
suppose a 4-bit "greater" (>) gate has output value 1 (true) and input values "ina = 
4'bx01x"and "inb = 4'blxOx". By setting all the x's to zeros and then to ones, the system 
can learn that in_a has the minimum and maximum values [mina, max a] = [2, 11] and 
in_b has [min_b, max_b] = [8, 13]. However, for the "greater" gate to be evaluated 
"true", it implies that min_a must be greater than minjb and maxjb must be smaller than 
max_a. Adjusting the values of min a and max b, the system can generate [minjn, 
max_a] = [9, 11] and [min_b f max_b] = [8, 10]. To map the new ranges back to three- 
valued logic, the system can use the following rules: 

Rule 4) Only bits with value "x" can have new Boolean implications; 

Rule 5) More significant bits must have implication prior to less significant ones. 

While Rule 4 is trivial in logic implication, Rule 5 is based on the fact that only 
the most significant "x" bit can divide the original range into two disjoint subranges. In 
the aforementioned example, implication on the second highest bit of input in b (with 
original value "4'blxOx") can split the original range [8, 13] into two distinct subranges 
[8, 9] (implied "0") and [12, 13] (implied "1"). In contrast, implication on the least 
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significant bit produces two overlapped ranges [8, 12] and [9, 13]. Therefore, to have the 
new implied range [8, 10], it is mandatory that the second highest bit be implied "0" 
because this new range [8, 10] has an empty intersection with the other implied range 
[12, 13]. Implication on the least significant bit cannot draw any conclusion on this. 

Likewise, the system can learn that the most significant bit of in_a must have 
implied value "1". Therefore, the new ranges for in_a and in_b will be equal to [10, 11] 
and [8, 9], respectively. Mapping these new ranges back to three-valued logic generates 
implications "in_a = 4'blOlx" and "in_b = 4 r bl00x". 

4) Multiplexers: The multiplexer primitive has two data inputs and one selecting 
signal to choose between these two inputs for the output. If the selecting signal has a 
known value (i.e., "0" or 'T), the forward and backward implications will act like the 
buffer primitive which implies the chosen input to the output, and vice versa. In contrast, 
if the multiplexer has an unknown selecting signal, the system uses the cube union of the 
input values to derive the implication on the output of this multiplexer. For example, if 
the inputs of a multiplexer have values 4^1x10 and 41)10x0, then by cube union, the 
output will have the implied value 4'blxxO. In contrast, if one of its inputs has a null 
cube intersection with the output, for example, the output has value 4Td1x00 and one of 
the input has value 4^x010, then it implies that the selecting signal cannot have the value 
that selects this input. 

5) Tristate Elements: A tristate element is usually used as an input to a multiple- 
driven net. It contains one (multiple-bit) data input and one or more single-bit controlling 
signals. When all the controlling inputs are off, the tristate element is in the high- 
impedance state such that it will have no effect on its fan-out gates. Therefore, any bit of 
the tristate output in high impedance backward implies that all the controlling signals are 
off and, thus, forward implies that all the output bits are in a high-impedance state. The 
implications of a noninverted tristate element is summarized in Figure 7. As depicted in 
Figure 7, all the output bits of the tristate element must have high impedance or known 
values at the same time. As shown in the third and fourth rows of Figure 7, whenever the 
output bas a high-impedance or known-value bit, the enabling signal is implied and, thus, 
lead to some implications on the data input and output. 

6) Registers/Flip Flops: Similarly, the system can derive implications for the 
asynchronous "set" and "reset" signals of a data register by examining its data input and 
output values. For example, when the clock input of a register has a positive trigger at the 
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current time, if all the data output bits have been assigned to M 0's" and at least one of its 
input bits has been assigned to "1", the system can learn that the register's "reset" signal 
must be asserted. 

In one embodiment, based on the aforementioned rules, the system can perform 
logic implication whenever a decision on a boolean gate assignment is made. The system 
then checks to determine if a conflict occurred during the implication process (step 308). 
If any conflict occurs during the implication process, the system backtracks to the 
previous decision (step 310) and undoes the implication associated with the previous 
decision (step 312). The system identifies the previous decision that created the conflict, 
marks or records the decision as a bad decision, and undoes the implication associated 
with the decision. 

However, unlike the bit-level logic implication where the single-bit signal can be 
implied only once (i.e., from "x" to "0" or "1"), a word-level signal can be implied 
multiple times (e.g., from M'bxxxx" to '^TdxxOI" to "4^1001"). Therefore, when an 
implication process returns a conflict and the system backtracks to its previous condition, 
the system cannot just reset the signals to "x", but needs to recover the signals to their 
previously partially implied values. Having recovered the signals, the system determines 
if there is another control signal to process (step 302) and continues processing. 

If there is no conflict (step 308), the system determines if all the controls signals 
are justified (step 314). The system checks to ensure that there are no unjustified boolean 
gates. If all the control signals are justified, the system successfully produced a vector of 
the control signals (i.e., Pis are reached and all the constraints on the control logic are 
satisfied) (step 318), and the word-level ATPG justification process ends. Otherwise, if 
all the control signals are not justified, the system updates the list of decision points and 
determines if there is another control signal to process (step 302). 

Modular Arithmetic Constraint Solver 

In one embodiment, a modular arithmetic constraint solver is based on the 
modular number system. This is advantageous because the values of the hardware signals 
are represented as fixed-width bit-vectors. In addition, using modular instead of the 
general integral arithmetic prevents the false-negative effect. For example, a circuit may 
include a multiplier with two 3-bit inputs, a and b, and a 4-bit output, c, and the following 
nonlinear arithmetic constraints describe the multiplier: 
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a * b = c 
0 < a, b < 8 
0<c< 16 

Given the initial assignments of "c = 12" and "a = 4", the solution "b = 3" can be 
easily derived by direct implication. However, "b = 7" is also a solution because (4 * 7) 
modulo 16 = 12, as c is a 4-bit signal. Therefore, if the local solution (a, b) = (4, 3) does 
not satisfy other imposed constraints while (a, b) = (4, 7) does, using a solver/algebra not 
based on the modular number system results in a false-negative conclusion. 

Generally, constraints on datapath can be divided into two types: linear and 
M" 10 nonlinear. Nonlinear arithmetic constraints are those derived from multipliers and 
shifters. Since completely solving the nonlinear constraints can be very difficult, if not 
impossible, the modular arithmetic constraint solver applies analytical approaches, such 
as, by way of example, prime number factoring, and the like, to heuristically enumerate 
the possible solutions and substitute them into the arithmetic equations. Thus, the 
f 15 remaining constraints become linear and can be solved by a linear modular constraint 

S solver component of the modular arithmetic constraint solver. 

fy 

jg- In contrast, linear constraints correspond to linear arithmetic operators such as 

p adders, subtractors, and multipliers having one constant input. A linear subcircuit with m 

outputs and n inputs can be transformed to a problem of m. linear equations with n 
20 variables. This can be further formulated into a matrix form as A * x = b, where A is 
an m * n matrix representing the coefficients in the m equations, x is a n * 1 column 
matrix containing the n variables, and b is a m * 1 column matrix for the output 
constraints. Solving the input vectors that can satisfy the output constraints is equal to 
finding the solution to the matrix equation. The term "column/row matrix" is used 
25 instead of "column/row vector" to avoid confusion with the term "bit- vector." 

For example, consider a two-input two-output linear circuit with all signals 
being 3-bit wide. The output constraint is (5, 4) and the circuit under this constraint is 
transferred into the following matrix format: 



ru 

in 

EH 



1 1 




X 




5 


2 7 




y 




4 
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where x and y are the input signals. Solving it in the integral domain, the linear modular 
constraint solver component first multiplies the first row by two and subtracts it from the 
second row. This produces the following matrix format: 



1 1 




X 




5 


0 5 




y 




-6 



There is only one nonintegral solution (x, y) = (3 1/5, -6/5). However, under 
modulo-2 3 number system, a solution (x, y) = (3, 2) can be found. This solution can be 
derived by calculating the multiplicative inverse of bit-vectors. Additional theoretic 
details of the linear modular constraint solver component is disclosed in Appendix A. 

HDL designs may frequently include bit slicing and concatenation operators. Bit 
slicing and concatenation transforms the linear operations to nonlinear constraints. That 
is, the solution set can no longer be expressed in a linear closed form. Thus, the linear 
modular constraint solver component of the modular arithmetic constraint solver cannot 
utilize the aforementioned method to solve the linear equations that have bit slicing and 
concatenation operations. Solving the linear equations that have bit slicing and 
concatenation operations involve enumerating of some of the variables applying the 
constraint implication to screen out the illegal set of solutions. A procedure suitable for 
solving the linear equations that have bit slicing and concatenation operations is disclosed 
in Appendix B. 

Figure 4 is a flow chart of an exemplary method for solving the arithmetic 
functions for the datapath logic portion of the circuit, according to one embodiment. 
Beginning at a start step, the modular arithmetic constraint solver determines the possible 
solutions for the set of nonlinear equations (step 402). The modular arithmetic constraint 
solver enumerates the possible solutions that have not been processed. If there is a 
solution that has not been processed, the modular arithmetic constraint solver selects one 
solution for the set of nonlinear equations from the list of yet-to-be-processed solutions. 

The modular arithmetic constraint solver checks to determine if there is a 
nonlinear solution to process (step 404). If all the possible solutions for the set of 
nonlinear equations have been processed (i.e., without solving the set of linear equations), 
the modular arithmetic constraint solver concludes that there is no solution for the 
arithmetic functions (step 414), and ends processing. Otherwise, if there is a nonlinear 
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solution to process, the modular arithmetic constraint solver solves the set of linear 
equations using the linear modular constraint solver component (step 406). The linear 
modular constraint solver component utilizes the current nonlinear solution and the 
constraints for the linear equations to solve the set of the set of linear equations using the 
modular number system. 

The modular arithmetic constraint solver checks to determine if a solution for the 
linear equations is found (step 408) 4 If a solution for the linear equations is not found, the 
modular arithmetic constraint solver selects another solution for the set of nonlinear 
equations from the list of yet-to-be-processed solutions (step 410), and continues 
processing steps 404 through 408. Otherwise, if a solution for the linear equations is 
found, the modular arithmetic constraint solver finds a solution for the arithmetic 
functions (step 412), and ends processing. 

A technical advantage of the present invention includes combining structural 
word-level ATPG and a modular arithmetic constraint solver. The word-level ATPG 
decision-making process is confined to the selected control signals. Thus, the 
enumeration of an enormous number of choices at the datapath signals is avoided. 

Another technical advantage of the present invention includes providing ATPG 
implication translation techniques that enable word-level logic implementation to be 
performed across the boundary between the control logic and the datapath portion of the 
circuit. Thus, ATPG search space is effectively reduced. 

Another technical advantage includes providing a modular arithmetic constraint 
solver. The modular arithmetic constraint solver is based on a modular number system 
instead of an integral number system. Thus, using the modular arithmetic constraint 
solver avoids or prevents the false-negative effect that can result from bit- vector 
value modulation. 

This invention may be provided in other specific forms and embodiments without 
departing from the essential characteristics as described herein. The embodiments 
described above are to be considered in all aspects as illustrative only and not restrictive 
in any manner. The following claims rather than the foregoing description indicate the 
scope of the invention. 
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